I use ePO 22.214.171.124 on windows 2008 r2 and installed several mcafee agents 126.96.36.1991 on clients with windows xp sp3. I also installed and enabled solidcore client 188.8.131.529.
Then I tried to enable blocking several registry keys. I configured change control policy and added the registry key on the "write protect registry" tab. Then I assigned this policy to the system.
And I'v got a strange result - in some cases registry key is blocked, so if try to edit it I get error massage, but in some cases didn't.
For example if I add HKEY_LOCAL_SYSTEM\SYSTEM\CurrentControlSet\Enum at the "write protect registry" tab in the policy I can successfully add new key to HKEY_LOCAL_SYSTEM\SYSTEM\CurrentControlSet\Enum on the client. But for example if I add HKEY_LOCAL_SYSTEM\SYSTEM or HKEY_LOCAL_SYSTEM\SYSTEM\CurrentControlSet then I can't add new key to HKEY_LOCAL_SYSTEM\SYSTEM or HKEY_LOCAL_SYSTEM\SYSTEM\CurrentControlSet correspondingly - I get a error message.